Appendix F: Does FERPA Apply to Our Department?

[Jun 28, 2008 8:06] Email phishing scam targeting WebMail users has been reported. More Information

Aspects of student information require more stringent security. Here you can test your data against the a list of questions that will decide if you store any FERPA data.

FERPA (Family Educational Rights and Privacy Act) restricts access and release of student information. Full information on the University’s FERPA-related policies are here.

The University may disclose personally-identifiable information designated as directory information from a student's education records without prior consent, unless the student informs the Office of the University Registrar in writing that directory information should not be released without written consent. This certification does not preclude the verification of degrees awarded. Directory information consists of:

  • student name
  • home and school addresses, telephone numbers, e-mail address
  • year of birth
  • country of citizenship
  • major(s)
  • school of enrollment
  • full or part-time status
  • year in school
  • participation in officially-recognized activities and sports
  • dates of attendance
  • degrees, honors, scholarships, and awards received
  • most recent previous educational institution attended
  • names of parents or guardians
  • and weight and height of members of athletic teams.

All other information not specifically listed, including grades, courses, days and times of course meetings, withdrawals, suspension, and month and day of birth, cannot be disclosed without the student’s permission. Such information needs to be protected not only from external release, but also protected from access by those within the University, who do not have an authorized, job-related need to see it.

© 2008 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.